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. Abstract 
> 

O We present a recursive construction of a {2t + l)-wise uniform set of permutations 

^ on 2n objects using a {2t + 1) — (2n, n, •) combinatorial design, a t-wise uniform set of 

iT^ permutations on n objects and a (2t + l)-wisc uniform set of permutations on n objects. 

Using the complete design in this procedure gives a t-wise uniform set of permutations 
Q on n objects whose size is at most t^", the first non-trivial construction of an infinite 

^ family of t-wise uniform sets for t> 4. If a non-trivial design with suitable parameters 

is found, it will imply a corresponding improvement in the construction. 

g Keywords: t-wise permutation, combinatorial design, recursive construction. 

CN 1 Introduction 
> 
o 

\Q A t-wise uniform set of permutations is a subset of the symmetric group Sn which has the 

^ same statistics on any t-tuple as Sn- In other words: 

^ Definition 1. A t-wise uniform set (of permutations on n objects) is a subset T C Sn 

^ such that for any distinct ii, . . . ,it G [n] and any distinct ji, ■ ■ ■ ,jt G [n], we have that the 

^ — I probability that a{im) = jm for all 1 < m < t is the same whether a is chosen uniformly 

>■ from Sn or uniformly from T. 

^ Equivalently, T is a t-wise uniform set if 

^ 1 

^|{. 6 r : = for 1 < ,n < *}l = „(„_ ...(„_, ^ ^ (D 

for every distinct ii, . . . ,it G [n] and every distinct ji, . . . ,jt G [n\. 

There are two trivial constructions of t-wise uniform sets: The symmetric group Sn is a 
t-wise uniform set for any t < n, and the alternating group An is a t-wise uniform set for 
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t < n — 1 (and n > 2). In this paper we consider the problem of constructing non-trivial 
t-wise uniform sets. 

The problem of finding explicit constructions for t-wise uniform sets was posed as an open 
problem by Kaplan, Naor, and Reingold in [5]. It was also shown there that approximate 
t-wise uniform sets of small size exist. Approximate t-wise uniform sets were further explored 
in pp , where Alon and Lovett showed that there exists a perfect t-wise uniform distribution 
over any approximate t-wise uniform set, a useful result for derandomization. 

Non-trivial explicit constructions of (non-approximate) t-wise uniform sets for infinitely 
many n are known only for t = 1,2, 3: the group of cyclic shifts x x + a modulo n is a 
1-wise uniform set, the group of invertible affine transformations x ^ ax + b over a finite field 
F yields a 2-wise uniform set, and the group of Mobius transformations x (ax + b) / (cx + d) 
with ad — bc= 1 over the projective line F U {oo} yields a 3-wise uniform set. Moreover, it is 
known (see for example [31 Theorem 5.2]) that for n > 25 and t > 4 there are no subgroups 
of Sn, other than An and 5'^ itself, that form a t-wise uniform set; such subgroups are called 
i-transitive subgroups of Sn- In contrast, it was shown recently [7] that for all n > 1 and 
1 < t < n, there exists a t-wise uniform set of permutations on n letters of size ra^* for 
some universal constant c > 0. For small t and large n, this result is close to the simple 
lower bound of n{n — 1) • • • (n — t + 1) which is implied by ([T]). It is important to emphasize, 
however, that the proof in [7] is purely existential and provides no hint as to the construction 
of such small t-wise uniform sets. Our work gives the first non-trivial explicit construction 
of an infinite family of t-wise uniform sets for t > 4. 

A natural approach to constructing t-wise uniform sets is the divide-and-conquer method. 
To choose a permutation a on 2n letters, it suffices to do the following. 

Step 1. Choose the set S C [2n] of n elements that will be mapped by a to 1, . . . , n. 

Step 2. Choose two permutations ri and T2 on n letters each to determine the behavior of 
cr on S* and S'^. 

If both steps are done independently and uniformly at random, then the resulting permuta- 
tion a is uniformly random. Moreover, if Step 1 is done uniformly at random and ti and T2 
are sampled independently (of each other and of S) and uniformly from two t-wise uniform 
sets, then the resulting family of permutations forms a t-wise uniform set. Indeed, in this 
case if < m < t, 1 < ji, . . . , jm < and n + 1 < jm+i, ■ ■ ■ , jt "^n are distinct indices and 
1 < ii, . . . ,it < 2n are distinct indices, then 

Pr((T(ii) = ji, . . . , cr(zi) = jt) = Pr(zi, ...imES, im+i, ...it^S)- 

■ Pr(o-(ii) = ji, . . . , a{im) = jm\ii, ...im^S, z^+i, ...it^S)- 

■ Pr(o-(i,„+i) = jm+i, • • . , (T{it) = jt\ii, ...imeS, i^+i, ...it^S) 

and each term on the right hand side takes the same value whether S, ti, and T2 are chosen 
independently and uniformly at random, or S is chosen uniformly at random and Ti and T2 
are chosen independently and uniformly from t-wise uniform sets. 

This observation gives us a naive approach to constructing t-wise uniform sets recur- 
sively. Letting Per(n, t) denote the minimal size of a t-wise uniform set of permutations on 
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n elements, we obtain the recursion 

Per(2n,t) < i j FeT{n,tf. (2) 

We can use this recursion, together with the initial conditions Per(n,t) = n\ for t > n, to 
construct t-wise uniform sets; however, this recursion does not yield non-trivial constructions. 

The first main contribution of this work is to propose an improved divide-and-conquer 
scheme for creating t-wise permutations. Specifically, adapting an idea proposed in [2], we 
observe that to construct a {2t + l)-wise uniform set of permutations on 2n elements, it 
suffices to use a (2t + l)-wise uniform set on n elements and a t-wise uniform set on n 
elements in Step 2 above, instead of two {2t + l)-wise uniform sets (see Figure ig. This 
yields the recursion: 



/2n\ 

Per(2r2,2t + 1) < f j Per(n, 2t + 1) Per(n, t), (3) 

where we define Per(?7,, 2t + 1) = PeT{n,n) = n\ when 2t + 1 > n. Unlike the naive recursion 
0, this recursion yields a construction of a family of non-trivial t-wise uniform sets. 

Theorem 1. Per(n, t) < t^" when n and t have the form n = 2"^ and t = 2^ — 1 for integers 
m > 1 and i > 2. 

While t^" is much smaller than the trivial upper bound n!, it is still much larger than the 
existence result of The second main contribution of this work is to suggest a potential 
extension that could lead to a smaller construction: Denoting by [^^) the set of subsets of 
[n] of size exactly k, we suggest to replace the uniformly chosen set of n elements from Step 
1 above with a set of n elements that is t-wise uniform, in the following sense. 

Definition 2. A (2n, t) -selection is a subset S C ('^^') such that for all / = {ii, . . . , it} C [2n] 
and all J I, the probability that J C 5* and / \ J C S*^ is the same whether S is chosen 
uniformly from ('^^') or uniformly from S. 

A (2n, )f:)-selection is equivalent to a t — (2n, n, ■) combinatorial design (see Section |4]). 
To obtain a t-wise uniform set, we can choose 5* uniformly from a (2n, t)-selection in Step 1 
above, rather than uniformly from ('^^'). Letting Sel(2n,t) denote the minimal size of a 
(2n, t)-selection on 2n elements, this allows us to replace the naive recursion ^ with the 
following recursion: 

Per(2n, t) < Sel(2n, t) Per(n, tf, (4) 
and the more powerful recursion ^ with: 

Per(2n, 2t + 1) < Sel(2n, 2t + 1) Per(n, 2t + 1) Per(n, t). (5) 

These recursions imply that a non-trivial construction of a (2n, t)-selection with the 
appropriate parameters will result in a non-trivial construction of a t-wise uniform set. For 
example, it is shown in [U] that a (2n, t) selection (regarded as a t — (2n,n, ■) design) must 
be of size at least [f^^^) if t is even and of size at least '^{(^^"^1^2) ^ there were 
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an explicit construction of a (2n, t) selection of size n'^* for some c > (the existence of 
such a selection is proven in but no explicit construction is known), then recursion ^ 
would lead to an explicit construction of a t-wise uniform set on n elements of size at most 
(t + iy"' for some c' > and recursion ([s]) would lead to a t-wise uniform set of size at most 
2ct(iogn)i°s2 some q > depending only on t. Thus our improved recursion allows us 

more efficiently to reduce the problem of finding t-wise uniform sets to the problem of finding 
(2n, t)-selections. If a (2n, t)-selection is allowed to be a multiset, then a reduction in the 
reverse direction holds as well: a {2n, t)-selection S can be obtained from a t-wise uniform 
set T by taking the family of sets of elements mapped to 1, . . . , n by the elements of T. 

Unfortunately, we have been unable to come up with non-trivial constructions of {2n, t)- 
selections with the appropriate parameters, or to find such constructions in the literature on 
combinatorial designs [HE]- Some more suggestions for extending our approach are described 
in Section m 



2 The improved recursion 

In this section we derive the recursion (|5]). Recursion ([s]) follows immediately by using the 
complete selection. For convenience, we will call a permutation chosen uniformly at random 
from a t-wise uniform set a t-wise uniform permutation. 

Let A and B be t- and (2t + l)-wise uniform sets on n elements, respectively, and let S 
be a (2n, 2t + l)-selection. For each S E S let f = fs and g = gs denote bijections from S 
and S'^, respectively, to [n]. For each a E A, t E B, and S E S define a permutation fis,a,T 
on 2n elements as follows: 

J(r o(t)(/(x)) X eS 
I T{g{x)) + n X E b 

The permutation /is,o-,r sends the elements of S to {1, . . . , n} and the elements not in 5* to 
{n + 1, . . . , 2n}. The behavior of fJ^s,a,T on S is determined hj r o a and the behavior on S*^ 
is determined by r (see Figure [T]). 

Proposition 1. Ai = {fJ'S,a,T '■ S E S,a E A,t E B} is a (2t + l)-wise uniform set. 

Recursion ^ follows from the proposition since |A^| < In the rest of this 

section we prove Proposition [T] 

We start by introducing some notation. For a set of indices /, a function h and a set S*, 
let xi = yi denote Xi = yi for all i E I, let h{xi) = yi denote h{xi) = yi for all i E I, let 
Xj E S denote Xi E S for all i E I, and let Xj ^ S denote Xi ^ S for all i E I. 

The key step in our proof of the proposition is the following lemma. It asserts that if a 
and r are t- and {2t + l)-wise uniform permutations on [n], respectively, independent of each 
other, then the pair of permutations t o a and r, while neither uniform nor independent in 
general, behave exactly as uniform and independent when queried together on at most 2t + 1 
inputs. 
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Figure 1: A (2t + l)-wise permutation /j, on 2n elements is constructed from a set S chosen 
from a (2n, 2t+l)-selection, and permutations a and r drawn from and (2f+l)-wise uniform 
sets of permutations on n elements, respectively. The behavior oi /i on S is determined by 
TOO", and the behavior of fi on S"^ is determined by r. Note that in this diagram, we are 
showing which number gets sent to which position; for example, /x(10) — 1 and /i(l) = 2. 



Lemma 1. Let a and r be t- and {2t + l)-wise uniform permutations on [n], respectively, 
independent of each other. For any r,s > satisfying r + s — 2t + 1 and any distinct 
ii, . . . , ir, distinct ji, . . . , jr, distinct ki, . . . , kg, and distinct ii, . . . ,£s in [n], we have 

Pr((ro<T)(iM) =JH,r(A;[,i) = ~ ~ ■ (7) 

ft' 

Proof. Fix r, s and sets of indices as in the lemma. Let 

M — {mi e [r] : there exists a m2 G [s] such that jm^ — ^^2}- 

For ease of notation, reorder the indices so that if jmi = ^m,2-i then mi = m2. Observe that 
on the event that (r o (7)(i[j.]) = j[r] and T{k[s]} — £[s\ we must also have that a{iM) — 
and cr(ib) 7^ kc for any 6 G [r] \ M and c e [s] \ M. Let R denote the set of all permutations 
for which these two conditions hold; i.e. 

R = {a e Sn ■ 0£{iM) — kM and a{ib) 7^ kc for all 6 e [r] \ M and c e [s] \ M}. 

It follows that 

Pr ((r o a){i[r]) = j[r],T{k[s]) = £is]) = Pr ((r o cT)(i[r]) = T(fc[s]) = and cr e i?) . 
Breaking the event on the right-hand side into disjoint events based on the value a takes. 
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and then using the independence of r and a, we have 

Pr {{Toa){i[r]) = j[r],T{k[s]) = i[s]) = X^Pr {{t o a){i[r]) = j[r],r{k[s]) = i[s] and a = a) 

= ^Pr ((r oa)(i[^]) = r(/c[,]) = Pr(a = a). 



The definition of R shows that for any a G -R we have 

{{TOa){i[r]) = j[r],T{k[s]) = i[s]} = {{t O a){i[r]\M) = j[r]\M , r{k[s]) = i[s]} ■ 

Moreover, by the definitions of R and M, we know that the elements of a{i[r]\M) U A;[s] are all 
distinct and that the elements of j[r]\M U i[s] are distinct. Thus, recalling that r + s = 2t + 1 
we can use the {2t + l)-wise uniformity of r and equation ([T]) to write 

Pr ((r o a){iir]) = j[r], r(A;[,]) = 



n ■ (n - 1) ■ ■ ■ (n - (r + s - |M|) + 1) 
(n-r- s + \M\y. 



Hence we may continue ([s]) and obtain 

Pr ((r o (T)(i[^]) = r (/;;[,]) = = 

^ + |M|)! ^ (n-r-s+ |A/|). ^ 

a£R 

Now let a' be a permutation chosen uniformly at random from 5*^. We claim that 

Pr(a eR) = Pr(a G R). (10) 

To see this, we consider separately the cases r < t and s < t. One of these cases must hold 
since r + s = 2t + 1 by assumption. First, suppose r < t. We partition the event a & R into 
disjoint events based on the values a assigns to ii, . . . , as follows. 

Pr(fTei?) = 5^PrK?[,])=XH), (11) 

where the sum is taken over all sets of distinct Xi,...,Xr G [n] such that xm = ku and 
Xb 7^ kc for all 6 G [r] \ M and c G [s] \ M. Now, since r <t and a is t-wise uniform, for each 
fixed xi, . . . , we have 

Pr(o-(i[r]) = X[r]) = Pr(cr'(i[r]) = X[r]). (12) 



Combining (11) and (|12j) we obtain 

Pr(a eR) = 5^Pr(a(zM) = x^) = 5^Pr(a'(a;H) = A;[,]) = Pr(a' G i?), 
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where the sums are over the same choices of Xi, . . . ,Xr as in ( 11 ). 

The case s < t proceeds similarly, by partitioning the event a E R according to the 
inverse images of /ci, . . . , fcg through a. We obtain 

Pr(a eR) = ^Pr(a(a;H) = k^s]) = J^Piiaixis]) = A;^) = Pr(a' G R), 

where the sum is taken over all sets of distinct xi,. . . ,Xs G [n] such that xm = in and 
Xc 7^ ib for all 6 G [r] \ M and c G [s] \ M. The second equality follows because s <t and a 
is t-wise uniform. Thus we have established (10) in all cases. 

y random p 

Pr((T' G R) 



Finally, for the uniformly random permutation a' it is straightforward to verify that 

{n — r)\{n — s)\ 



{n-r - s + |M|)!n!' 



Thus the lemma follows from (10) and (|9j). □ 

Proof of Proposition [I].- To prove Proposition [T| we need to show that if is chosen uniformly 
at random from Jvl and ii, . . . ,«2t+i ^ [2^] are distinct indices and ji, . . . , j2t+i ^ [2n] are 
distinct indices then 

, {2n- (2t + 1))! , , 

Pr(/i(^[2i+i]) = = ^ ^^r^- (13) 

Fix two sets of distinct indices, ii, . . . ,i2t+i G \2n] and ji, ■ ■ ■ , j2t+i £ [2n]. By reorder- 
ing the indices, we may assume without loss of generality that 1 < ji,---,jm < and 
n+1 < jm+i, ■ ■ ■ ,j2t+i < 2r;, for some < m < 2t+l. Observing that (5*1, o"i, ri) 7^ (5*2, cr2, T2) 
implies that fiSi,cTi,Ti 7^ f^S2,^2,T2 conclude that choosing an element fi uniformly at random 
from Ai is equivalent to choosing elements S, a, and r uniformly at random and indepen- 
dently from S, A, and B, respectively, and letting /x = fis,a,T- Defining S,a,T and /i in this 
way, we have 

Pr(/i(^[2t+i]) = j[2t+i]) = 

= Pr(z[„] G S,i[2t+l]\[m] ^ 5, (r O (T O f){i[m]) = j[m], O g) {i[2t+l]\lm]) + n = j[2t+l]\[m]), 

where the equality {Tog)(i[2t+i]\[m])+n = j[2t+i]\[m] should be interpreted as {Tog){if,)+n = jk 
for all k E [2t + 1] \ [m]. Conditioning on S, we obtain 

Pr(/^(^[2t+i]) = J[2t+i]) = 

= E(l(i[„]es,ip,+ij\[™]^5) ■ Pr((r oao = (r o ^)(z[2t+i]\[m]) + n = J[2t+i]\M I S)), 

(14) 

where lyi denotes the indicator random variable of the event A. Now, recalling that r and 
a are independent of S, and that / and g depend only on 5", we may apply Lemma [T] to 
conclude that for every S satisfying i^rn] & S and i[2t+i]\[m] ^ S we have 

p // .N/. N ■ / V ^, ■ I {n - my.{n - {2t + 1 - m))\ 
Pr((rocTo/)(2[„]) = (ro^)(z[2i+i]\[„])+ra = j[2t+i]\H | S) = — . 
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Substituting back into ( 14 ) yields 



Pr(/i(«[2t+i]) = i[2t+i]) 



{n - m)\{n - (2t + I - m))\ 
^2 



i S). (15) 



Since iS is a {2n, 2t + l)-selection we have 



( 



2n-(2t+l) 



) 



Pr(i[„] G S,ii2t+i]\im] ^ S) 



n—m 



Substituting this into (15) yields 



Pr(/^(^[2t+i]) = J[2t+i]) 



(2n 



-(2t + l))! 
(2n)! 



and the proposition follows. 
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Our construction is a modification of the method used in [2] for creating t-wise indepen- 
dent strings. In the context of that work, a (binary, unbiased) t-wise independent string is 
a random vector X = {Xi, . . . ,X„) G {0, 1}" satisfying that Pr(Xj = 1) = 1/2 for every i 
and that (Xj^, . . . ,XjJ are independent for every 1 < ii < ■ ■ ■ < it < n. It was shown there 
that if X is a {2t + l)-wise independent string and F is a t-wise independent string (both 
of the same length) such that X and Y are independent then the string formed from the 
concatenation of X and X + Y is {2t+ l)-wise independent. The proof there is similar to our 
own, but made easier by the fact that the group {0, 1}" is simpler than the group Sn and 
by the fact that no selection is necessary in the context of t-wise independent strings. It is 
of interest to understand the extent to which this method is applicable and find a common 
generalization of the above two scenarios. 

3 The construction 

In this section we use recursion ^ to construct an infinite family of non-trivial t-wise uniform 
sets, as stated in Theorem [Tj 

Proof of Theorem^- We start by noting a few simple facts. First, we trivially have that 
Per(n, t) = n\ < t^" when t > n. Second, we observe that the set of permutations {crt}, 
for < 6 < n, defined by (Tb{i) = i + b (mod n) is a 1-wise uniform set of permutations on 
{0, . . . ,n — 1}. Thus, Per(n, 1) < n for all n. (In fact, since Per(n, t) > n(n — 1) ■ ■ ■ (n — 1 + 1) 
by ([T]), this is an equality.) 

Next, we establish the theorem for t = 3 (or £ = 2). That is, we show that Per(2™', 3) < 
32™+ g^jj integer m > 1. The proof is by induction. For m = 1, we have Per(2, 3) = 2 < 3^ 
as required. For m > 1, we have by equation (|3]), the above observations and the induction 
hypothesis that 



Per(2™, 3) < 2^"^ Per(2'"-\ 1) Per(2' 



,m—l 



3) < 2^"'2'^-'3^ 
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It follows that Per (2"^, 3) < S^™^', as required, by using that 2(™-i) < (3/2)2™ all m > 2 
since logs (3/2) > 1/2 and a; < 2^ for x > 1. 

Finally, we establish the theorem in general. We will prove by induction on m that for 
each m > 1, the claim holds for all i > 2. Again, the case m = 1 follows by our observation 
that Per(?T,, t) = n\ < t^" when t > n. Suppose that m > 1 and fix £ > 2. We have already 
established the case i = 2 and the case t > n, so we may assume that £ > 3 and satisfies 
2^ — 1 < 2™. We also assume the induction hypothesis 

Per(2'"-\2^'-l) < (2^' - 1)^" 

for all f > 2. Thus, by (|3|, 

Per(2'^, 2^ - 1) < 2^™ Per(2'"-\ 2^~^ - 1) Per(2'"-\ 2^ - 1) < 
< (2^-1 - 1)2™ (2^ - 1)2™ < (2^ - i)2™+\ 

as required. □ 



4 The connection with t-designs 

To obtain a smaller construction of a t-wise uniform set of permutations, it would suffice to 
construct a small (2?t,, t)-selection that could be used in recursions (|4]) or (|5|. Selections are 
a special case of t-designs, defined as follows (see for example [4j): 

Definition 3. A t — (f , k, A) design is a subset S C ('^1) satisfying that for every distinct 
ii, . . . ,it E [v] we have 

\{SeS : ti,...,tteS}\ = X. 

Thus, a (2n, t)- selection is a t — {2n, n, A) design for some A. The following simple lemma 
shows that the converse is also true (see for example [9l Proposition 1]): 

Lemma 2. Let S be a t — {v , k, A) design, ii, . . . , -it G [v], and m < t. Then the probability 
that ii, . . . ,im G 5* and im+i, ■ ■ ■ ,it ^ S is the same whether S is chosen uniformly from ('^') 
or uniformly from S . 

Thus, to improve the parameters of our construction using recursions (|4]) or (|5|, we need 
efficient t — {2n,n, A) designs for large n (and t > 4). However, we have not been able to 
find such designs in the literature. 



5 Directions for future work 

The parameters of our result could possibly be improved by considering a generalization of 
our construction that is based on an idea from |2]. The generalization is as follows: for 
any A; > 2, a (2t + l)-wise uniform permutation on kn elements may be created from a 
uniformly random partition T of [kn] into k groups of size n, and random permutations 
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r, (Ti, . . . ,(Tk-i where r is a {2t + l)-wise uniform permutation on n elements and each cxj 
is a t-wise uniform permutation on n elements, and T, r, cti, . . . , ak-i are independent. The 
permutation is formed by partitioning the kn inputs to k groups according to T, applying 
r to the first group and applying r o aj to the [i + l)'st group for 1 < i < k — 1. The fact 
that the resulting permutation fj. is (2t + l)-wise uniform follows easily from Lemma [l] and 
the simple observation that given any inputs ii,. . . ,i2t+i to fi, and any choice of T, there 
can be at most one which determines the behavior of n on more than t of these inputs. A 
significant advantage of this generalized construction is that although the number k can be 
arbitrarily large, still only one of the permutations used needs to be {2t + l)-wise uniform. 
Moreover, as in recursion (|5]), we may relax the condition that T be uniformly random to the 
condition that T be a {2t + l)-wise partition in an appropriate sense (though for k > 3 this 
notion is no longer connected with t-designs). We were unable to obtain any improvement 
in our parameters from this generalized construction, but we see it as a potential starting 
point for future improvements on our construction. 

The construction in [2] was inspired by the {u\u+v) method for combining error-correcting 
codes [HI P- 76]. Another promising direction for future research is to check whether other 
methods for combining codes can be adapted to yield constructions of t-wise uniform sets of 
permutations. 
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